Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/2d585fa6-2727-3762-a1fe-3ab6b9eba952.roa
File:                     2d585fa6-2727-3762-a1fe-3ab6b9eba952.roa (raw, json)
Hash identifier:          gEElduIvfwyegDLjVla3cSegQJ6pD5ZpnSD9M3/bZWk=
Subject key identifier:   B0:F0:0C:EB:0B:B5:50:21:D4:B0:E7:3A:4A:A9:C7:0F:D8:FC:4A:5C
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584D97556CBBC36A618E7A10B280
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/2d585fa6-2727-3762-a1fe-3ab6b9eba952.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     18636
IP address blocks:        2602:f4f2::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6c:bb:c3:6a:61:8e:7a:10:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=b7e0d576-12ff-4ed3-ae19-3ea4182da04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:8b:a0:95:9c:96:a9:a8:98:2c:c2:ca:4f:
                    53:b1:94:ff:04:bb:41:35:09:71:0d:79:33:04:dc:
                    16:4c:c0:1f:69:32:57:e5:c1:99:ff:b4:a0:88:36:
                    db:74:80:0d:72:bf:d7:ff:51:94:c1:b5:a4:0d:d1:
                    b8:70:b6:cb:56:ce:56:80:86:86:bf:00:fa:be:4b:
                    77:fb:db:81:45:96:f8:7a:20:74:4d:9d:4d:75:4f:
                    f5:33:54:2f:13:46:c0:9a:1e:58:5a:fb:5e:ae:5b:
                    1b:cb:1b:74:c4:b1:44:c5:f2:c1:18:54:7f:f1:2d:
                    8f:3e:45:7f:ff:b5:2c:0b:49:76:69:7a:d2:52:01:
                    1c:80:2c:68:89:fc:ca:67:d7:27:d5:19:1e:75:55:
                    54:b0:ea:d8:34:00:42:59:ce:ac:6f:7e:ba:33:52:
                    a6:82:9c:30:8a:de:1a:91:5a:54:ab:a3:c6:1e:f4:
                    12:13:28:52:e0:0e:03:f9:d8:61:7e:95:c0:5c:3f:
                    88:04:60:8d:73:5b:ed:ca:a6:5d:e6:ec:70:1b:60:
                    b7:5f:6b:db:c5:0f:c6:df:8a:ce:b8:bc:b5:09:60:
                    03:c8:cd:ec:c7:70:c2:18:99:f4:23:86:d4:f1:01:
                    e3:ae:a0:9b:3a:f7:d2:87:20:38:63:77:2e:10:16:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:0C:EB:0B:B5:50:21:D4:B0:E7:3A:4A:A9:C7:0F:D8:FC:4A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/2d585fa6-2727-3762-a1fe-3ab6b9eba952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f2::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:11:74:be:4d:f2:61:cf:e6:5c:58:5d:86:d5:5f:57:85:33:
         c4:d0:c1:3a:3f:f0:ea:6c:d8:54:ba:1f:ee:25:fa:a1:fb:bd:
         4f:21:21:81:11:b2:65:4f:f6:fd:2d:1a:d1:7e:4c:57:f2:e3:
         c1:40:5d:46:b4:9c:04:4b:de:0d:f4:2e:a6:7d:b8:d8:bc:da:
         3c:61:b2:7a:55:6c:6b:28:35:b3:9e:17:13:79:4b:1d:11:75:
         ad:7f:a3:35:4e:a9:3d:5f:a5:4d:e8:05:68:1c:f6:6b:a4:73:
         c6:bf:13:3c:59:58:4d:3f:f4:22:79:7c:2c:26:44:3d:f3:62:
         9e:60:ca:3f:1a:f7:a3:2d:04:d0:b4:d3:a3:4e:eb:87:24:01:
         dc:80:67:c9:e3:cb:91:19:01:54:a7:18:8b:79:a5:88:80:30:
         bb:86:4e:2b:f4:03:a9:28:a3:8b:7f:33:f0:84:1c:70:1c:3b:
         d4:4f:e1:02:08:bf:b3:71:2c:29:4d:b3:ad:7e:c3:7e:c1:91:
         8e:57:b4:9e:2a:32:dd:bc:6f:90:d1:e4:7d:9f:79:86:21:8f:
         1c:28:08:59:2e:58:87:a8:a7:c6:48:81:20:a0:50:cc:87:03:
         74:83:27:eb:7e:06:94:c5:4c:d1:ab:e5:ef:4d:33:e9:fc:04:
         51:6f:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:23 2026 by rpki-client